Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5acf17df-f656-4cd5-8ec7-f99335a76e72.roa
File: 5acf17df-f656-4cd5-8ec7-f99335a76e72.roa (raw, json)
Hash identifier: b3hLHNZvO4Ey2SjajHtpyc++SPo7uK4PxbAgPLiCwkE=
Subject key identifier: B1:EF:98:BD:CB:D9:F3:DE:93:1D:7E:3F:BB:20:2D:B5:7B:23:1E:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3502434357FCE4A3C91FE99C703887C922177C42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5acf17df-f656-4cd5-8ec7-f99335a76e72.roa
Signing time: Tue 14 Oct 2025 00:51:21 +0000
ROA not before: Tue 14 Oct 2025 00:51:21 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:02:43:43:57:fc:e4:a3:c9:1f:e9:9c:70:38:87:c9:22:17:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:51:21 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=554c4d48ccefdd023bbf35766ed8c4a6fc26c53a41e6fbd796ddd66714f77f54, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:09:23:96:08:0f:a3:84:0f:c1:bc:44:77:
c5:f8:d0:dc:4d:e7:ce:cf:a3:a6:b7:9e:7a:d7:8b:
e5:07:5f:98:9f:ad:39:f7:9f:61:a6:03:a4:54:95:
e1:ed:d3:59:ef:20:f3:14:1b:4b:d1:ff:df:ce:b0:
ef:34:4d:58:9d:63:fc:b5:e3:6c:e9:9d:85:3f:53:
46:dd:4c:85:1e:f1:68:28:62:35:01:35:84:b3:e7:
70:5c:f7:fc:5a:38:be:fb:98:cb:13:a2:c1:a4:89:
5a:5d:0b:07:38:39:37:23:34:2b:4a:0d:47:2f:02:
f4:d0:2b:44:1f:55:91:14:e9:bf:8b:8a:22:99:ca:
96:1f:77:d9:11:3f:4c:c4:28:97:d4:2a:ae:b6:4f:
7e:fe:4c:6d:62:48:8b:cd:ef:cb:f1:55:d9:8c:c0:
be:5d:b6:7b:1a:4b:80:86:86:da:17:dc:73:2d:d1:
89:5d:34:81:65:3c:25:cb:27:2c:37:86:90:04:b5:
74:15:8d:69:e8:ed:23:3f:aa:fd:ef:5b:1c:b8:bd:
20:3b:2f:f0:89:f0:12:ea:f3:86:3e:3d:c5:47:9e:
48:ce:15:bf:5f:15:e3:5d:4c:a3:59:87:cb:04:d5:
02:8b:27:af:83:c6:92:78:d0:08:97:d4:f3:87:9b:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:98:BD:CB:D9:F3:DE:93:1D:7E:3F:BB:20:2D:B5:7B:23:1E:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5acf17df-f656-4cd5-8ec7-f99335a76e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.9.0/24
Signature Algorithm: sha256WithRSAEncryption
73:37:92:7a:fc:a0:63:d5:b2:b4:00:c6:6e:b1:1a:45:ca:5a:
41:56:70:cf:38:e3:ba:81:be:5e:27:e3:32:44:5b:33:d1:3f:
4c:46:d6:ec:52:0f:62:30:34:c7:b2:90:a4:2a:16:7a:00:02:
ae:c9:dc:b6:fa:83:e3:63:68:4b:7a:a8:ac:f8:ed:9c:bd:ac:
64:cb:91:41:16:20:81:a8:48:ce:6b:e8:a5:ef:89:ab:1c:3e:
9e:14:be:23:0d:8b:13:44:8a:67:21:1f:5f:5f:11:f7:3a:e1:
21:4d:50:dc:0c:81:55:ca:f1:0e:fe:cc:e6:98:09:f8:22:56:
cc:a2:4d:47:d5:36:16:aa:57:ef:67:0e:32:5e:e6:8b:0f:ae:
c1:ca:01:f1:0c:99:84:bf:28:a9:e4:71:6e:a5:74:62:7a:8f:
7f:16:a1:88:fd:a0:b7:3e:9b:72:7d:8f:ad:98:d0:b8:4b:20:
11:11:21:c2:39:71:80:92:15:83:ef:c2:24:09:b2:7e:a8:92:
52:2a:6e:a3:4b:53:5a:d7:00:da:22:14:18:a4:28:81:18:6e:
02:f1:07:38:a8:6d:37:ec:3e:75:80:38:ed:71:96:a0:8e:c7:
08:3e:70:a7:1e:5e:ca:7f:2a:0f:d2:8a:0e:06:8d:59:f8:21:
7e:cf:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:46 2025 by rpki-client